We patch our servers monthly, and if there are no updates to install, then they still get rebooted. When the server is rebooted, after it boots, the TermService service running in a SvcHost.exe process starts to gradually consume more and more memory, until the server stops responding because of low memory and needs to be forcibly reset.
You can RDP to it initially, but eventually the server stops accepting new connections and you need to connect via the console directly.
Last week we had our 3rd server exhibit this problem and need to find a solution before others start showing the same issue. All are Windows Server 2003, but 2 are virtual and 1 is physical.
I identified the service by running tasklist /svc/fi "IMAGENAME eq svchost.exe"
at a command-prompt and then checking the PID against the one consuming memory in Task Manager. Services wouldn't let me stop the service, but killing the offending process worked and the servers are fine since. RDP is currently disabled.
I've thus far not found anything similar on Google, and we are attempting to build a new machine to see if we can recreate the situation.